Ramesh S

As a Senior Network & Security Engineer at Con Edison, I lead architecture, modernization, and cybersecurity initiatives across New York City’s mission-critical utility network—spanning data centers, Azure cloud, 300+ substations, and enterprise campuses. My work ensures the reliability, security, and performance of systems powering millions of customers across NYC. Key Contributions & Impact Lead enterprise network architecture across cloud, datacenter, OT, and corporate domains, eliminating connectivity silos and improving secure access for 10,000+ users Designed and operated a high-availability IP backbone interconnecting 60+ substations and data centers, ensuring uninterrupted real-time grid telemetry and SCADA operations. Modernized legacy networks into Cisco ACI policy-driven fabrics with micro-segmentation, enhancing zero-trust posture for OT workloads Re-engineered core routing to IS-IS underlay and BGP overlays, significantly improving convergence and minimizing outage propagation Implemented secure remote access with Cisco ISE, AnyConnect, Duo MFA, and RBAC policy automation. Integrated Palo Alto and Cisco FTD firewalls for OT/IT segmentation, energy-market interfaces, and NERC/NIST compliance Built automation pipelines using Python, Ansible, REST APIs (Cisco DNAC, Meraki, FortiManager), eliminating config drift and accelerating deployments. Designed resilient hybrid cloud networks using Azure ExpressRoute, VPN Gateways, vWAN, NSGs, Azure Firewall, and AWS Direct Connect Authored detailed HLD/LLD designs, Visio diagrams, runbooks, and zoning matrices that accelerated new-site deployments by 30% Validated next-generation routing platforms (Juniper MX, Cisco ASR) for multi-terabit scaling and future utility network expansion. Core Technologies Cisco ACI, Nexus, Catalyst, IS-IS, BGP, OSPF, MPLS, EVPN-VXLAN, SD-WAN, Palo Alto, Cisco FTD, Azure Networking, AWS Direct Connect, NSX-T, Ansible, Python, ThousandEyes, SolarWinds, PRTG, SCADA/OT Network Segmentation.

During my tenure as a Senior Network and Security Engineer at Cummins, I played a central role in the global modernization of enterprise, manufacturing, and cloud network infrastructures that support some of the company’s most mission-critical operations. Cummins operates across more than 30 countries, with dozens of manufacturing plants, highly distributed supply chain centers, engineering facilities, logistics hubs, data centers, and cloud platforms. My responsibility was to ensure the stability, performance, security, and scalability of the networks that empower these environments—ranging from real-time production-line systems and ERP platforms to Azure cloud workloads, telematics platforms, and IoT analytics pipelines. My work involved leading architectural transformations, building automation frameworks, implementing advanced security models, modernizing legacy WAN topologies, improving wireless performance, redesigning data center networks, and strengthening both IT and OT security. I supported Cummins’ strategic technology evolution by delivering network solutions that improved efficiency, reduced operational risk, enhanced cybersecurity posture, and strengthened the company’s ability to operate globally without interruption.

Worked within Mastercard’s mission-critical payment infrastructure, designing, securing, and operating large-scale data center and backbone networks that support real-time global financial transactions with five-nines availability. Engineered and deployed multi-rack, high-availability data center networks supporting real-time payment processing systems with strict latency and uptime SLAs. Designed Access, Distribution, and Core network architectures using Juniper QFX/MX platforms, implementing OSPF and BGP for resilient and scalable routing. Installed and validated Cisco and Arista spine-leaf fabrics, improving east-west traffic performance and removing legacy scalability constraints. Managed and secured PCI-regulated payment networks using Cisco ASA, Palo Alto, and Check Point firewalls; resolved ACL, NAT, and policy issues to maintain PCI-DSS compliance. Led firewall rulebase migrations and optimizations across Cisco, Palo Alto, and Check Point platforms, eliminating 1,000+ redundant rules and reducing security risk. Supported global backbone networks built on Cisco and Arista technologies, ensuring uninterrupted payment transactions worldwide. Engineered BGP and OSPF routing across multiple global data centers, resolving routing instability, BGP leaks, and OSPF flaps that could impact millions of transactions. Performed EVPN-VXLAN validation and troubleshooting, resolving route leaks and ensuring overlay network stability. Validated 40GbE and 100GbE links using Ixia, identifying packet loss, microbursts, and buffer constraints to optimize performance. Collaborated closely with application and platform teams to troubleshoot transaction latency issues tied to network congestion and MTU/MSS mismatches. Technologies: Cisco, Arista, Juniper QFX/MX, Palo Alto, Check Point, Cisco ASA, BGP, OSPF, EVPN-VXLAN, PCI-DSS, Spine-Leaf, IPsec, DMVPN, SNMP, SIEM, Python, Ixia, 40/100GbE

As a Senior Network & Security Engineer at TRC Companies, I architected and supported enterprise, field, and industrial network infrastructures across environmental engineering, energy, and construction operations nationwide. I led network modernization, security engineering, and cloud connectivity initiatives that improved reliability, performance, and compliance across mission-critical systems. Key Contributions & Impact Designed and implemented enterprise LAN/WAN architectures across corporate offices, remote field sites, and client project locations, improving resiliency and scalability. Built secure hybrid cloud connectivity using Azure VPN, ExpressRoute, and AWS VPC integrations to support engineering applications, analytics platforms, and remote operations. Deployed Palo Alto and Cisco ASA/FTD firewalls with granular segmentation for OT, IT, DMZ, project networks, and environmental monitoring systems. Implemented SD-WAN edge solutions to optimize connectivity for distributed field offices, reducing latency and increasing application stability for project teams. Led migration of legacy Cisco Catalyst platforms to modern Nexus, ACI-ready designs, enabling automation, scalability, and improved policy control. Integrated Cisco ISE for 802.1X authentication, device profiling, guest access, and zero-trust-aligned identity enforcement across the enterprise. Supported environmental and energy project teams by stabilizing networks at remote substations, monitoring facilities, and construction sites with ruggedized equipment and redundant routing paths. Conducted nationwide wireless assessments, redesigned RF footprints, and resolved chronic WLAN issues across high-density office and industrial facilities. Core Technologies Cisco Catalyst/Nexus, Palo Alto NGFW, Cisco ASA/FTD, SD-WAN, BGP, OSPF, Azure/AWS Networking, Cisco ISE, VPN/IPsec, Wireless/WLC, SolarWinds, PRTG, Ansible, Python.

As a Network Engineer at ExxonMobil, I supported large-scale enterprise and industrial network infrastructures spanning refineries, chemical plants, offshore sites, corporate campuses, and global data centers. I contributed to network modernization, security enhancement, and operational reliability efforts powering mission-critical energy operations. Key Contributions & Impact Supported enterprise routing and switching across global refinery, plant, and corporate environments using Cisco Catalyst, Nexus, and ISR/ASR platforms. Managed WAN/MPLS connectivity for production sites, logistics hubs, and remote operations, ensuring stable connectivity for industrial control systems and business applications. Troubleshot and optimized BGP, OSPF, HSRP, and spanning-tree designs, resolving routing loops, failover issues, and chronic performance gaps. Assisted in deployment and lifecycle management of Cisco ASA and Palo Alto firewalls, including policy tuning, VPN configuration, NAT, and high-availability setup. Implemented site-to-site VPNs and IPsec tunnels supporting secure connectivity between refineries, offshore rigs, and regional data centers. Supported wireless deployments across refinery and field environments, tuning controllers, resolving AP issues, and improving coverage in harsh industrial conditions. Worked with refinery IT/OT teams to segment networks, apply ACLs, and support secure connectivity for SCADA, DCS, and plant automation systems. Performed network capacity planning, circuit upgrades, hardware refreshes, and lifecycle management for core, distribution, and access layers. Monitored network health using SolarWinds, NetFlow, packet captures, and Syslog analysis to proactively address performance degradations. Core Technologies Cisco Catalyst/Nexus, ISR/ASR, BGP, OSPF, HSRP, STP, Cisco ASA, Palo Alto, VPN/IPsec, MPLS, Wireless (WLC/AP), SolarWinds, NetFlow, SCADA/ICS networking.

Assisted in troubleshooting LAN connectivity and hardware issues in the network of 500 hosts. Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF). Implemented security policies using ASA 55XX Firewall as well as Fortinet firewall IPS/IDS, AAA Security (TACACS+, RADIUS) on different series of routers. Configure BGP features such as as-override, Local pre, EBGP load sharing on client connections. Configured routers and coordinated with LD Carriers and LECs to turn-up new WAN circuits. Configuring, Maintaining the Routers and Switches and Implementation of RIP, EIGRP, OSPF, BGP routing protocols and trouble shooting. Configuring rules and Maintaining Palo Alto & Analysis of firewall logs using various tools. Build Cisco UCS 6200 series fabric interconnect. Recommend and design equipment configurations for LAN/WAN/VOIP deployment on Cisco, ADTRAN, Fortinet, F5, Redware and Bluecoat. Maintained redundancy on Cisco 2600, 2800 and 3600 routers with HSRP.